CLAIMS 

What is claimed is: 

1 1 , A method comprising: 

2 generating a list of update keys on a key distribution center system based on a table of secret 

3 keys identifying valid and invalid receivers of a plurality of receivers, said list of 

4 update keys allowing valid receivers to decrypt a valid content key using update keys 

5 obtained from the list of update keys; 

_6 generating a multiple nested list of decryption patterns based on the list of update keys; 

7 %1 broadcasting said multiple nested list of decryption patterns to the plurality of receivers; 

m 8 recovering a content key from the list of update keys by recovering a set of update keys for 

\j 9 each receiver from the multiple nested list of decryption patterns and using the set of 

s 10 update keys to decrypt the content key. 

m 1 2. The method of claim 1 , wherein said generating a list of update keys comprises generating at 
M: 2 least one intermediate key and one content key. 

1 3. The method of claim 2, wherein said generating at least one intermediate key and one content 

2 key comprises randomly generating said at least one intermediate key and one content key. 

1 4. The method of claim 3 , wherein authorized receivers will receive an intermediate key that 

2 allows recovery of a valid content key and unauthorized receivers will receive an 

3 intermediate key that does not allow recovery of a valid content key. 
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1 5 . The method of claim 1 , wherein said generating a multiple nested list of decryption patterns 

2 comprises encrypting an entry of the list of update keys using a key that is a combination of a 

3 previous update key, a secret key for a receiver associated with the entry of the list of update 

4 keys, and an index indicating a location in said table of secret keys associated with each 

5 entry. 

1 6. The method of claim 5, wherein an entry in said multiple nested list of decryption patterns 

2 includes a predetermined test pattern encrypted with the secret keys for a receiver associated 

3 with the entry of the list of update keys. 

1 7. The method of claim 1 ? wherein said recovering a set of update keys for each receiver from 

2 the multiple nested list of decryption patterns comprises parsing said multiple nested list of 

3 decryption patterns to locate an entry intended for a particular receiver based on detection of 

4 a predetermined test pattern included in an entry in the multiple nested list of decryption 

5 patterns. 

1 8. The method of claim 1 , further comprising broadcasting content encrypted with said content 

2 key. 

1 9. The method of claim 8, further comprising decrypting said content encrypted with said 

2 content key using a content key recovered from the multiple nested list of decryption 

3 patterns. 
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1 10. A method comprising: 

2 generating a list of update keys on a key distribution center system based on a table of secret 

3 keys identifying valid and invalid receivers of a plurality of receivers, said list of 

4 update keys allowing valid receivers to decrypt a valid content key using update keys 

5 obtained from the list of update keys; 

6 generating a multiple nested list of decryption patterns based on the list of update keys; and 

7 broadcasting said multiple nested list of decryption patterns to the plurality of receivers. 

1 11. The method of claim 1 0, wherein said generating a list of update keys comprises generating 

2 at least one intermediate key and one content key. 

1 12, The method of claim 1 1 , wherein said generating at least one intermediate key and one 

2 content key comprises randomly generating said at least one intermediate key and one 

3 content key. 

1 13. The method of claim 1 0, wherein said generating a multiple nested list of decryption patterns 

2 comprises encrypting an entry of the list of update keys using a key that is a combination of a 

3 previous update key, a secret key for a receiver associated with the entry of the list of update 

4 keys, and an index indicating a location in said table of secret keys associated with each 

5 entry. 
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1 14. The method of claim 13, wherein an entry in said multiple nested list of decryption patterns 

2 includes a predetermined test pattern encrypted with the secret keys for a receiver associated 

3 with the entry of the list of update keys. 

1 15. A method comprising : 

2 receiving a multiple nested list of decryption patterns from a key distribution center system; 

3 recovering a set of update keys from the multiple nested list of decryption patterns; and 

4 recovering a content key from the list of update keys by using the set of update keys to 

5 decrypt the content key. 

1 16. The method of claim 1 5 , wherein said multiple nested list of decryption patterns comprises a 

2 list of update keys encrypted with a key that is a combination of a previous update key, a 

3 secret key for a receiver associated with an entry of the list of update keys, and an index 

4 value, 

1 17. The method of claim 1 6, wherein an entry in said multiple nested list of decryption patterns 

2 includes a predetermined test pattern encrypted with secret keys for a receiver associated 

3 with the entry of the list of update keys. 

1 18. The method of claim 1 5, wherein said recovering a set of update keys from the multiple 

2 nested list of decryption patterns comprises parsing said multiple nested list of decryption 

3 patterns to locate an entry intended for a particular receiver based on detection of a 
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4 predetermined test pattern included in an entry in the multiple nested list of decryption 

5 patterns. 

1 19. A system comprising : 

2 a key distribution center to generate a list of update keys based on a table of secret keys 

3 identifying valid and invalid receivers of a plurality of receivers, said list of update 

4 keys allowing valid receivers of said plurality of receivers to decrypt a valid content 

5 key using update keys obtained from the list of update keys, generate a multiple 
f =i6 nested list of decryption patterns based on the list of update keys, and broadcast said 
j2 7 multiple nested list of decryption patterns to the plurality of receivers; and 

fli 8 a content receiver to recover an appropriate set of update keys from the multiple nested list of 

\J 9 decryption patterns so that the final key recovered in the set of update keys is a 

* 10 content key. 

CO 1 20, The system of claim 19, wherein said key distribution center generates at least one 
H 2 intermediate key and one content key, 

1 21 . The system of claim 20, wherein said key distribution center randomly generates said at least 

2 one intermediate key and one content key. 

1 22. The system of claim 2 1 , wherein authorized receivers will receive an intermediate key that 

2 allows recovery of a valid content key and unauthorized receivers will receive an 

3 intermediate key that does not allow recovery of a valid content key. 
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1 23 . The system of claim 1 9, wherein said key distribution center encrypts an entry of the list of 

2 update keys using a key that is a combination of a previous update key, a secret keys for a 

3 receiver associated with the entry of the list of update keys, and an index indicating a 

4 location in said table of secret keys associated with each entry to generate said multiple 

5 nested list of decryption patterns. 

1 24. The system of claim 23 , wherein an entry in said multiple nested list of decryption patterns 

2 includes a predetermined test pattern encrypted with the secret keys for a receiver associated 

3 with the entry of the list of update keys. 

1 25. The system of claim 19, wherein said receiver parses said multiple nested list of decryption 

2 patterns to locate an entry intended for a particular receiver based on detection of a 

3 predetermined test pattern included in an entry in the multiple nested list of decryption 

4 patterns. 

1 26. The system of claim 19, further comprising content provider to broadcast content encrypted 

2 with said content key. 

1 27. The system of claim 26, wherein said receiver decrypts said content encrypted with said 

2 content key using a content key recovered from the multiple nested list of decryption 

3 patterns. 
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1 28. A machine-readable medium having stored thereon data representing sequences of 

2 instructions, the sequences of instructions which, when executed by a processor, cause the 

3 processor to: 

4 generate a list of update keys on a key distribution center system based on a table of secret 

5 keys identifying valid and invalid receivers of a plurality of receivers, said list of 

6 update keys allowing valid receivers to decrypt a valid content key using update keys 

7 obtained from the list of update keys; 

Q8 generate a multiple nested list of decryption patterns based on the list of update keys; 

® 9 broadcast said multiple nested list of decryption patterns to the plurality of receivers; 

^10 recover a content key from the list of update keys by recovering an appropriate set of update 

Jl 1 keys for each receiver from the multiple nested list of decryption patterns and using 
the set of update keys to decrypt the content key. 

1 29. The machine-readable medium of claim 28, wherein said generating a list of update keys 

2 comprises generating at least one intermediate key and one content key. 

1 30. The machine-readable medium of claim 29, wherein said generating at least one intermediate 

2 key and one content key comprises randomly generating said at least one intermediate key 

3 and one content key, 

1 31. The machine-readable medium of claim 30, wherein authorized receivers will receive an 

2 intermediate key that allows recovery of a valid content key and unauthorized receivers will 

3 receive an intermediate key that does not allow recovery of a valid content key. 
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1 32. The machine-readable medium of claim 28, wherein said generating a multiple nested list of 

2 decryption patterns comprises encrypting an entry of the list of update keys using a key that 

3 is a combination of a previous update key, a secret keys for a receiver associated with the 

4 entry of the list of update keys, and an index indicating a location in said table of secret keys 

5 associated with each entry. 

1 33. The machine-readable medium of claim 32, wherein an entry in said multiple nested list of 

2 decryption patterns includes a predetermined test pattern encrypted with the secret keys for a 

3 receiver associated with the entry of the list of update keys. 

1 34. The machine-readable medium of claim 28, wherein said recovering an appropriate set of 

2 update keys for each receiver from the multiple nested list of decryption patterns comprises 

3 parsing said multiple nested list of decryption patterns to locate an entry intended for a 

4 particular receiver based on detection of a predetermined test pattern included in an entry in 

5 the multiple nested list of decryption patterns. 

1 35 . The machine-readable medium of claim 28, further comprising broadcasting content 

2 encrypted with said content key. 

1 36. The machine-readable medium of claim 35, further comprising decrypting said content 

2 encrypted with said content key using a content key recovered from the multiple nested list 

3 of decryption patterns. 
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1 37. A machine-readable medium having stored thereon data representing sequences of 

2 instructions, the sequences of instructions which, when executed by a processor, cause the 

3 processor to: 

4 generate a list of update keys on a key distribution center system based on a table of secret 

5 keys identifying valid and invalid receivers of a plurality of receivers, said list of 

6 update keys allowing valid receivers to decrypt a valid content key using update keys 

7 obtained from the list of update keys; 

8 generate a multiple nested list of decryption patterns based on the list of update keys; and 

9 broadcast said multiple nested list of decryption patterns to the plurality of receivers. 

1 38, The machine-readable medium of claim 37, wherein said generating a list of update keys 

2 comprises generating at least one intermediate key and one content key. 

1 39. The machine-readable medium of claim 38, wherein said generating at least one intermediate 

2 key and one content key comprises randomly generating said at least one intermediate key 

3 and one content key. 

1 40. The machine-readable medium of claim 37, wherein said generating a multiple nested list of 

2 decryption patterns comprises encrypting an entry of the list of update keys using a key that 

3 is a combination of a previous update key, a secret key for a receiver associated with the 

4 entry of the list of update keys, and an index indicating a location in said table of secret keys 

5 associated with each entry. 
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1 4L The machine-readable medium of claim 40, wherein an entry in said multiple nested list of 

2 decryption patterns includes a predetermined test pattern encrypted with the secret keys for a 

3 receiver associated with the entry of the list of update keys. 

1 42. A machine-readable medium having stored thereon data representing sequences of 

2 instructions, the sequences of instructions which, when executed by a processor, cause the 

3 processor to: 

4 receive a multiple nested list of decryption patterns from a key distribution center system; 

5 recover a set of update keys from the multiple nested list of decryption patterns; and 

6 recover a content key from the list of update keys by using the set of update keys to decrypt 

7 the content key. 

1 43. The machine-readable medium of claim 42, wherein said multiple nested list of decryption 

2 patterns comprises a list of update keys encrypted with a key that is a combination of a 

3 previous update key, a secret key for a receiver associated with an entry of the list of update 

4 keys, and an index value. 

1 44. The machine-readable medium of claim 43, wherein an entry in said multiple nested list of 

2 decryption patterns includes a predetermined test pattern encrypted with secret keys for a 

3 receiver associated with the entry of the list of update keys. 

1 45. The machine-readable medium of claim 42, wherein said recovering a set of update keys 

2 from the multiple nested list of decryption patterns comprises parsing said multiple nested 
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list of decryption patterns to locate an entry intended for a particular receiver based on 
detection of a predetermined test pattern included in an entry in the multiple nested list of 
decryption patterns. 
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